# Google patches eighth Chrome zero-day exploited in attacks this year

DevFeed: [Google patches eighth Chrome zero-day exploited in attacks this year](<https://devfeed.tech/articles/google-patches-eighth-chrome-zero-day-exploited-in-attacks-this-year-125047.md>)

Original publisher: [Read original article](<https://www.bleepingcomputer.com/news/security/google-patches-eighth-chrome-zero-day-exploited-in-attacks-this-year/>)

Author: Sergiu Gatlan

Published: 2026-11-10T08:51:25Z

Content type: news

Language: en

Sources: [BleepingComputer](<https://devfeed.tech/sources/bleepingcomputer.md>)

Topics: [Google Chrome](<https://devfeed.tech/topics/google-chrome.md>), [known exploitable vulnerabilities](<https://devfeed.tech/topics/known-exploitable-vulnerabilities.md>), [Memory Safety](<https://devfeed.tech/topics/memory-safety.md>), [patches](<https://devfeed.tech/topics/patches.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [2026](<https://devfeed.tech/tags/2026.md>), [actively-exploited](<https://devfeed.tech/tags/actively-exploited.md>), [ai](<https://devfeed.tech/tags/ai.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [browser](<https://devfeed.tech/tags/browser.md>), [chrome](<https://devfeed.tech/tags/chrome.md>), [chromium](<https://devfeed.tech/tags/chromium.md>), [computer-help](<https://devfeed.tech/tags/computer-help.md>), [computer-security](<https://devfeed.tech/tags/computer-security.md>), [computers](<https://devfeed.tech/tags/computers.md>), [css](<https://devfeed.tech/tags/css.md>), [cve](<https://devfeed.tech/tags/cve.md>), [emergency-update](<https://devfeed.tech/tags/emergency-update.md>), [engine](<https://devfeed.tech/tags/engine.md>), [exploited](<https://devfeed.tech/tags/exploited.md>), [google](<https://devfeed.tech/tags/google.md>), [google-chrome](<https://devfeed.tech/tags/google-chrome.md>), [infosec](<https://devfeed.tech/tags/infosec.md>), [infosec-computer-security](<https://devfeed.tech/tags/infosec-computer-security.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [linux](<https://devfeed.tech/tags/linux.md>), [mac](<https://devfeed.tech/tags/mac.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-removal](<https://devfeed.tech/tags/malware-removal.md>), [security](<https://devfeed.tech/tags/security.md>), [security-updates](<https://devfeed.tech/tags/security-updates.md>), [spyware](<https://devfeed.tech/tags/spyware.md>), [support](<https://devfeed.tech/tags/support.md>), [tech-support](<https://devfeed.tech/tags/tech-support.md>), [technical-support](<https://devfeed.tech/tags/technical-support.md>), [updates](<https://devfeed.tech/tags/updates.md>), [use-after-free](<https://devfeed.tech/tags/use-after-free.md>), [virus](<https://devfeed.tech/tags/virus.md>), [virus-removal](<https://devfeed.tech/tags/virus-removal.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [web-browser](<https://devfeed.tech/tags/web-browser.md>), [windows](<https://devfeed.tech/tags/windows.md>), [zero-day](<https://devfeed.tech/tags/zero-day.md>)

## AI overview

Google patched CVE-2026-125350, a high-severity use-after-free flaw in Chrome's XML component that it says attackers are exploiting in the wild. The flaw can let an attacker manipulate memory and execute malicious code when Chrome later uses memory that was freed without clearing its pointer; Google has not shared details about the attacks. The fix is rolling out through Chrome's Stable Desktop channel for Windows, macOS, and Linux. Google says it may take days or weeks to reach all users; Chrome can check for updates automatically and install them after the next launch. This is the eighth actively exploited Chrome zero-day Google has addressed since the start of the year, according to the excerpt.

## Source excerpt

Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. [...]